Remove GraphiQL playground from @authx/example.

[dustybest-pc]

Summary

• Remove the unused /graphiql playground from @authx/example.
• Drop GraphiQL/Monaco-related client code, Vite plugin config, and dependencies (graphiql, @graphiql/toolkit, vite-plugin-monaco-editor, graphql-config).
• Refresh package-lock.json so the GraphiQL dependency tree is no longer installed.

Test plan

• Confirm CI passes (npm ci, lint, build, tests)
• Build @authx/example client and confirm it serves the AuthX UI normally
• Confirm /graphiql no longer renders a GraphiQL playground
• After release/deploy, verify authx-dev / authx no longer expose the playground at /graphiql
• Confirm AuthX GraphQL (/graphql) is unaffected

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details

Scanned Manifest Files

package-lock.json

• linkify-it@5.0.0
• ws@8.18.3
• markdown-it@14.1.0
• @envelop/core@5.3.1
• @envelop/instrumentation@1.0.0
• @envelop/types@5.2.1
• @fastify/busboy@3.2.0
• @floating-ui/core@1.7.3
• @floating-ui/dom@1.7.4
• @floating-ui/react@0.26.28
• @floating-ui/react-dom@2.1.6
• @floating-ui/utils@0.2.10
• @graphiql/plugin-doc-explorer@0.4.1
• @graphiql/plugin-history@0.4.1
• @graphiql/react@0.37.1
• @graphiql/toolkit@0.11.3
• @graphql-hive/signal@1.0.0
• @graphql-tools/batch-execute@9.0.19
• @graphql-tools/delegate@10.2.23
• @graphql-tools/executor@1.4.9
• @graphql-tools/executor-common@0.0.6
• @graphql-tools/executor-common@0.0.4
• @graphql-tools/executor-graphql-ws@2.0.7
• @graphql-tools/executor-http@1.3.3
• @graphql-tools/executor-legacy-ws@1.1.19
• @graphql-tools/graphql-file-loader@8.1.1
• @graphql-tools/import@7.1.1
• @graphql-tools/json-file-loader@8.0.20
• @graphql-tools/load@8.1.2
• @graphql-tools/merge@9.1.1
• @graphql-tools/schema@10.0.25
• @graphql-tools/url-loader@8.0.33
• @graphql-tools/utils@10.9.1
• @graphql-tools/wrap@10.1.4
• @graphql-typed-document-node/core@3.2.0
• @headlessui/react@2.2.7
• @n1ru4l/push-pull-async-iterable-iterator@3.2.0
• @radix-ui/primitive@1.1.3
• @radix-ui/react-arrow@1.1.7
• @radix-ui/react-collection@1.1.7
• @radix-ui/react-compose-refs@1.1.2
• @radix-ui/react-context@1.1.2
• @radix-ui/react-dialog@1.1.15
• @radix-ui/react-direction@1.1.1
• @radix-ui/react-dismissable-layer@1.1.11
• @radix-ui/react-dropdown-menu@2.1.16
• @radix-ui/react-focus-guards@1.1.3
• @radix-ui/react-focus-scope@1.1.7
• @radix-ui/react-id@1.1.1
• @radix-ui/react-menu@2.1.16
• @radix-ui/react-popper@1.2.8
• @radix-ui/react-portal@1.1.9
• @radix-ui/react-presence@1.1.5
• @radix-ui/react-primitive@2.1.3
• @radix-ui/react-roving-focus@1.1.11
• @radix-ui/react-slot@1.2.3
• @radix-ui/react-tooltip@1.2.8
• @radix-ui/react-use-callback-ref@1.1.1
• @radix-ui/react-use-controllable-state@1.2.2
• @radix-ui/react-use-effect-event@0.0.2
• @radix-ui/react-use-escape-keydown@1.1.1
• @radix-ui/react-use-layout-effect@1.1.1
• @radix-ui/react-use-rect@1.1.1
• @radix-ui/react-use-size@1.1.1
• @radix-ui/react-visually-hidden@1.2.3
• @radix-ui/rect@1.1.1
• @react-aria/focus@3.21.1
• @react-aria/interactions@3.25.5
• @react-aria/ssr@3.9.10
• @react-aria/utils@3.30.1
• @react-stately/flags@3.1.2
• @react-stately/utils@3.10.8
• @react-types/shared@3.32.0
• @repeaterjs/repeater@3.0.6
• @swc/helpers@0.5.17
• @tanstack/react-virtual@3.13.12
• @tanstack/virtual-core@3.13.12
• @theguild/federation-composition@0.19.1
• @types/ws@8.18.1
• @whatwg-node/disposablestack@0.0.6
• @whatwg-node/fetch@0.10.10
• @whatwg-node/node-fetch@0.7.25
• @whatwg-node/promise-helpers@1.3.2
• aria-hidden@1.2.6
• clsx@2.1.1
• clsx@1.2.1
• constant-case@3.0.4
• cosmiconfig@8.3.6
• cross-inspect@1.0.1
• data-uri-to-buffer@4.0.1
• debounce-promise@3.1.2
• detect-node-es@1.1.0
• dir-glob@3.0.1
• dset@3.1.4
• entities@4.5.0
• fetch-blob@3.2.0
• formdata-polyfill@4.0.10
• framer-motion@12.23.12
• get-nonce@1.0.1
• get-value@3.0.1
• globby@11.1.0
• graphiql@5.2.0
• graphql-config@5.1.5
• graphql-language-service@5.5.0
• graphql-ws@6.0.6
• is-primitive@3.0.1
• isomorphic-ws@5.0.0
• jsonc-parser@3.3.1
• lodash.sortby@4.7.0
• lower-case@2.0.2
• mdurl@2.0.0
• meros@1.3.1
• monaco-editor@0.52.2
• monaco-graphql@1.7.2
• motion-dom@12.23.12
• motion-utils@12.23.6
• no-case@3.0.4
• node-domexception@1.0.0
• node-fetch@3.3.2
• normalize-path@2.1.1
• nullthrows@1.1.1
• path-type@4.0.0
• picomatch-browser@2.2.6
• punycode.js@2.3.1
• react-compiler-runtime@19.1.0-rc.1
• react-remove-scroll@2.7.1
• react-remove-scroll-bar@2.3.8
• react-style-singleton@2.2.3
• remove-trailing-separator@1.1.0
• set-value@4.1.0
• string-env-interpolation@1.0.1
• sync-fetch@0.6.0-2
• tabbable@6.2.0
• timeout-signal@2.0.0
• uc.micro@2.1.0
• unixify@1.0.0
• upper-case@2.0.2
• urlpattern-polyfill@10.1.0
• use-callback-ref@1.3.3
• use-sidecar@1.1.3
• use-sync-external-store@1.5.0
• vite-plugin-monaco-editor@1.1.0
• vscode-languageserver-types@3.17.5
• web-streams-polyfill@3.3.3
• whatwg-mimetype@4.0.0
• zustand@5.0.8

packages/example/package.json

• @graphiql/toolkit@^0.11.3
• graphiql@^5.2.0
• graphql-config@^5.1.5
• vite-plugin-monaco-editor@^1.1.0

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[lolosett]

This looks good -- massive lockfile updates will need another set of eyes but looks like everything removed is in scope for simply removing graphiql tooling